AMMYY (Removal Guide) - Jun 2018 update

What is AMMYY?

Ammyy scam – a possible phone scam that might ask users to install remote access tools for malicious activities

Ammyy scam is used for tricking people into giving fake technicians remote access to their computers in order to fix various problems.

Ammyy scam is an old hoax that targets Windows OS users at least since 2013.^[1] Scammers call random people and present themselves as Microsoft specialists. They claim of detecting important issues or infections on their computers and ask to install a remote tool to fix them. Of course, this service is not free. People are asked to pay $200.

Scammers ask to install Ammyy admin software that allows establishing a remote desktop connection and get access to the victim’s computer. Therefore, the name of the program explains the title of this hoax.

The program is free and is available to download on the official website. We want to point out that this tool itself is not malicious and cannot do the damage. The company is also aware of the issue and warns users to be careful with suspicious phone calls.^[2] Attackers can only get access to your device if you let them. In this case, Ammyy removal is a must.

This legitimate program is available to download from the official website so, unsurprisingly, it has been exploited by cyber criminals.

When you give scammers access to your computer via remote access tools, they can do whatever they want. They might install malware, spyware, keyloggers, or delete your files. This activity can lead not only to data loss but emptied bank account or stolen identity too. So, Ammyy admin removal has to be completed immediately.

Ammyy scam fix requires not only uninstalling the program via Control Panel but checking the system for other cyber threats too. The latter task is extremely important if you let scammers access your PC. In this case, we highly recommend scanning the computer with FortectIntego or another anti-malware to make sure that attackers haven’t installed any malware.

Ammy Admin scam is an example of phone scams that are used for swindling the money from computer users.

The purpose of Ammyy scam – to make people pay for useless service

Researchers from NoVirus.uk assume that Ammyy admin scam is operated from India.^[3] Callers usually have a strong Indian accent. Though, an unusual English accent is the first warning sign that you are not talking with Microsoft technicians. Why do they keep calling and report about invented computer problems? The answer is very simple – they seek to scare people into paying $200 for their useless service.

Ammy Admin scam is the term used for phone support hoax that gives attackers remote access to a targeted computer with a legitimate software.

I got scammed by this yesterday. They called saying they were from microsoft and my computer was a host of some nasty viruses and was sending out illegal information(!). I should have known better but they were extremely persuasive, I let them in via the ammyy remote access and they started messing around with things – to show me all the ‘errors’ in my computer.^[4]

Usually, scammers try to convince people that they work for Microsoft,^[5] scammers start reporting about various PC problems and offer to let them access the system. We highly recommend avoiding such suggestions because by doing so you can easily give attackers the ability to steal your logins, passwords, and other personally identifiable information.

In addition, they may also try to infect your machine with malicious programs, redirect you to malicious sites, and initiate similar issues. Please, keep in mind that Microsoft has never been calling for people in order to ask them to pay for computer repair services. If you were involved in Microsoft Ammy hoax, follow the guide below and prevent additional problems.

The main aim of software is to give remote access to a computer.

The way how scammers reachers potential victims

Differently than regular tech support scams spreading on the web, this hoax does not require downloading any potentially unwanted program (PUP) or clicking a suspicious ad. Scammers usually use random phone numbers and can call anyone all over the world.

Hence, you may receive a call from AMMYY accidentally. Beware that these scammers always do their homework before they start contacting people, so they know who they are calling for. By using public phone directories and other sources, they can not only tell a full victim's name. They may also tell you where you live, your marital status, and other personal details.

We want to remind one more time that Microsoft does not make such phone calls. Thus, you should quit the conversation and block the number if possible. Scammers tend to call the same people again and again in order to reach their goal.

Ammyy scam fix: uninstall remote access program and check the system with anti-malware software

If you become a victim of the cam, you need to act immediately. If you are still talking on the phone with a scammer, hang up immediately. Then disconnect your computer from the Internet and uninstall the program. In order to remove Ammyy from a Windows computer, follow these steps:

1. Click Start -> Control Panel -> Programs (or Add/Remove Programs) -> Uninstall a Program.
2. Here, look for AMMYY, Ammyy Admin, and other unknown entries, and select Uninstall/Change.
3. Follow the guide on screen and click OK to save the changes.

Once you perform these steps, you should immediately download one of these programs and scan the system: FortectIntego, SpyHunter 5Combo Cleaner, or Malwarebytes. They will not only help you to make sure that your computer is free of malware. They will also help you to find its hidden components and remove them in order to prevent the loss of your personal information.

After Ammyy removal, you should also monitor your banking transactions and inform the bank if you notice any suspicious activities on your account. Additionally, you should change all your passwords. You cannot be sure if the attackers managed to steal credentials or not. Make sure that you set strong and unique passwords for each account.